Is CVE-2021-21508 actively exploited?

No active exploitation of CVE-2021-21508 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-21508 be exploited remotely?

No. CVE-2021-21508 requires local access to exploit.

What is the CVSS score of CVE-2021-21508?

CVE-2021-21508 has a CVSS score of 6.7 (MEDIUM).

HOME VULNERABILITIESCVE-2021-21508

MEDIUM

CVE-2021-21508

CWE-532Published: May 22, 2026· Updated: May 22, 2026

6.7

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:1.8th

Official Description

Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

NVD Source

Technical Analysis

CVE-2021-21508 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 6.7.